iloveyou/alexandria

Risky to adopt: this release appears effectively abandoned, with only one release about 7 years ago and no recent repository activity. It is not deprecated or archived, but the tiny project footprint and lack of security response make it a poor dependency choice.

Latest v0.2.16

Packagist

32%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 7 years and 7 months ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance or compatibility work.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and indicating a high abandonment risk.

Maintainers

Only one account has registry publishing access. This is a limited maintainer base, and no organization backing is shown to compensate for the lack of active repository work.

Repo popularity

The repository has 0 stars, 0 forks, and only 1 watcher. Low popularity is not decisive by itself, but here it provides no supporting evidence that the project is actively used or maintained.

Repo tooling

The repository uses Composer, showing basic build tooling, but has no security scanning tools. This is a minor transparency gap rather than a severe risk.